Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132352e302f32342d3234203d3e20323634333336.roa
File:                     3133382e3132322e3132352e302f32342d3234203d3e20323634333336.roa (raw, json)
Hash identifier:          WOKTOy5p7X/jKu8dH/wEl+XqZ/jOy3ibJvvb0TPy+sk=
Subject key identifier:   AB:8A:E1:22:F5:C5:CA:58:95:B0:12:41:2D:36:C3:BB:F0:2E:A3:CE
Certificate issuer:       /CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
Certificate serial:       0B4E27D96FDF461FB4DBCB94E31F7068560F335F
Authority key identifier: CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132352e302f32342d3234203d3e20323634333336.roa
Signing time:             Tue 11 Apr 2023 10:33:13 +0000
ROA not before:           Tue 11 Apr 2023 10:28:13 +0000
ROA not after:            Tue 09 Apr 2024 10:33:13 +0000
asID:                     264336
IP address blocks:        138.122.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4e:27:d9:6f:df:46:1f:b4:db:cb:94:e3:1f:70:68:56:0f:33:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Validity
            Not Before: Apr 11 10:28:13 2023 GMT
            Not After : Apr  9 10:33:13 2024 GMT
        Subject: CN=AB8AE122F5C5CA5895B012412D36C3BBF02EA3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:1b:08:74:ea:a7:98:a6:78:5b:e0:13:37:
                    a3:2a:7d:d8:92:19:91:f7:db:2e:4c:81:3d:8a:d2:
                    b6:4f:cb:60:aa:ef:75:de:e4:c5:a0:2a:a1:0e:18:
                    3b:e8:84:bb:c8:78:37:14:2f:ee:62:4d:82:0e:52:
                    60:2a:46:ec:d3:f7:11:4c:8c:64:59:fc:00:d6:63:
                    45:79:9b:f9:8a:11:3f:4f:7c:40:d6:d5:d1:79:90:
                    af:b3:8d:00:33:09:77:84:5e:ba:b9:4f:4e:16:3c:
                    7f:43:3c:e5:77:fe:b7:21:3f:b5:1d:90:ca:98:96:
                    2c:a4:99:22:be:5a:46:73:29:a1:fc:0d:83:55:c9:
                    cd:32:fc:51:95:93:cf:22:98:7d:b2:ae:ed:84:c0:
                    a8:04:ba:0e:cb:02:7d:3a:12:16:c2:54:27:d4:e4:
                    14:43:a7:15:04:d8:0b:8c:61:6c:02:42:d1:2a:90:
                    4d:8d:16:6b:1c:bc:16:91:3c:1c:2b:d8:98:00:a0:
                    15:d5:14:20:7c:b2:fd:db:fd:78:9f:d1:9e:c3:aa:
                    b5:81:35:8c:42:d0:0e:52:e6:05:83:f9:0f:3c:a9:
                    2f:70:89:c8:59:a1:41:9a:de:65:26:76:34:82:fd:
                    0b:96:0b:3a:63:e5:96:25:75:04:d8:c2:e3:42:2e:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8A:E1:22:F5:C5:CA:58:95:B0:12:41:2D:36:C3:BB:F0:2E:A3:CE
            X509v3 Authority Key Identifier:
                keyid:CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132352e302f32342d3234203d3e20323634333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:dc:10:15:69:40:fe:28:3c:f5:e5:92:4d:ad:66:62:fc:9d:
         d8:74:1b:05:bb:c6:c7:3e:e2:71:35:b0:29:e5:53:7d:5b:de:
         51:60:80:89:53:3f:0e:a9:8b:42:06:9f:54:ca:48:ce:7f:18:
         5c:57:ad:31:19:b5:14:0c:87:24:a3:b1:ab:95:e0:0c:02:88:
         f6:02:5d:72:38:d5:a5:20:77:4e:31:5d:43:f8:ee:41:fc:87:
         6d:55:28:dc:c2:8a:eb:d7:5e:aa:eb:14:b2:f5:75:a3:de:5c:
         a2:79:0b:6d:b9:92:83:90:7b:11:77:58:40:7a:0b:88:f4:f3:
         70:4c:aa:25:7b:02:44:4a:c1:6c:b1:db:0c:47:0e:35:d0:e4:
         58:3b:8f:2c:3a:6b:e2:61:e6:c4:d2:9c:59:3a:a5:97:85:1f:
         fa:26:c2:c3:7f:31:44:ba:57:2a:97:80:63:17:a6:e1:ab:66:
         f0:70:b3:d7:74:87:e2:bc:9a:1a:76:30:fa:d5:96:61:d7:1f:
         9b:98:38:da:5b:ff:b2:75:3f:92:29:10:e7:b0:0d:87:fb:94:
         95:3c:a1:23:2d:13:dd:bb:81:af:59:b5:4f:0b:82:54:6c:40:
         a3:51:09:e5:76:50:27:e2:de:16:e7:a6:24:70:77:80:e5:39:
         30:f5:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org